### Autogenerated by ntp.py ###

#
# Non-configurable defaults
#
driftfile /var/lib/ntp/ntp.drift
# By default, only allow ntpd to query time sources, ignore any incoming requests
restrict default noquery nopeer notrap nomodify
# Allow pool associations
restrict source nomodify notrap noquery
# Local users have unrestricted access, allowing reconfiguration via ntpdc
restrict 127.0.0.1
restrict -6 ::1

#
# Configurable section
#
{% if server is defined and server is not none %}
{%   for server, config in server.items() %}
{%     set association = 'server' %}
{%     if config.pool is defined %}
{%       set association = 'pool' %}
{%     endif %}
{{ association }} {{ server | replace('_', '-') }} iburst {{ 'noselect' if config.noselect is defined }} {{ 'preempt' if config.preempt is defined }} {{ 'prefer' if config.prefer is defined }}
{%   endfor %}
{% endif %}

{% if allow_clients is defined and allow_clients.address is defined %}
# Allowed clients configuration
restrict default ignore
{%   for address in allow_clients.address %}
restrict {{ address|address_from_cidr }} mask {{ address|netmask_from_cidr }} nomodify notrap nopeer
{%   endfor %}
{% endif %}

{% if listen_address is defined or interface is defined %}
# NTP should listen on configured addresses only
interface ignore wildcard
{%   if listen_address is defined %}
{%     for address in listen_address %}
interface listen {{ address }}
{%     endfor %}
{%   endif %}
{%   if interface is defined %}
{%     for ifname in interface %}
interface listen {{ ifname }}
{%     endfor %}
{%   endif %}
{% endif %}